Cloud-based identification and entry safety supplier ConductorOne has launched a brand new privileged entry administration (CPAM) product to assist safety and IT groups handle permissions and implement coverage for cloud sources.
“Legacy PAM options concentrate on account-centric entry management and privileged accounts have excessive ranges of static permissions,” mentioned Alex Bovee, co-founder and CEO of ConductorOne. “That is the alternative of a least privilege method to entry administration as applied by cloud PAM.”
That is ConductorOne’s second product with the primary being an identification governance and administration (IGA) providing for automating compliance processes in cloud-based purposes.
Agentless deployment allows the least privilege
The cloud-based providing, CPAM, is an agentless service for all SaaS and cloud infrastructure instruments related to ConductorOne. It may be used to handle entry to cloud infrastructure accounts in AWS, GCP, Azure, Snowflake, and so forth.
“This answer helps safety groups transfer in direction of a zero-standing privileges (ZSP) mannequin to stop identification breaches by automating permissions administration for cloud infrastructure and SaaS,” Bovee mentioned.
The CPAM capabilities can be accessed via an agent to use the least privilege entry controls to on-prem or non-cloud native infrastructure equivalent to Lively Listing, LDAP, Postgres, and Microsoft SQL server.